Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa
File:                     58999dee-a5dd-3f9e-9eae-4627b45d30df.roa (raw, json)
Hash identifier:          jiSM+5yKRsxiRn3zUch1N6SNaV5btcTKgrc5GwWlL78=
Subject key identifier:   79:9F:2D:E6:C1:EB:08:CC:DB:80:A1:A6:6D:D2:3E:81:23:04:93:A6
Certificate issuer:       /CN=59df81a1-cce3-4626-9cbb-51da282803bf
Certificate serial:       010D0C9F43285845857327D1F878A94740540100
Authority key identifier: D9:70:2F:5B:89:D9:C5:D3:86:61:81:94:5A:20:7B:35:45:3B:3D:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     399557
IP address blocks:        2001:504:109::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:27:d1:f8:78:a9:47:40:54:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59df81a1-cce3-4626-9cbb-51da282803bf
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=f942b6d5-6b99-47ce-aa1e-21cb16bda2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:09:04:19:82:12:33:d8:7d:de:75:73:c2:58:
                    62:ef:56:b6:1f:eb:01:e0:4f:e4:fd:f7:e5:7a:8f:
                    a9:c9:f2:25:23:71:26:dc:97:19:e3:7c:ea:45:91:
                    d5:43:1a:f2:79:af:0a:2b:53:bd:e7:1d:1b:ed:fa:
                    a7:33:5e:a0:fd:af:08:24:3c:3d:21:ca:a0:a7:73:
                    f7:25:c3:f2:3c:52:82:3b:3c:2c:2f:25:94:8e:11:
                    cb:33:59:aa:80:32:6b:9a:21:78:52:2f:dc:0f:c2:
                    9d:b9:cf:83:05:a2:40:5d:46:e8:f1:da:64:dd:48:
                    56:4b:54:29:36:1b:81:cd:20:f4:e3:c5:f8:bd:88:
                    3d:7a:03:89:5e:75:47:b8:81:88:e5:4e:07:34:9d:
                    7b:01:ad:a1:4b:46:97:a7:f4:76:57:0b:18:69:f9:
                    10:e9:9b:1c:81:5d:f9:7c:17:21:9b:5a:29:b5:a5:
                    7f:c3:c4:28:71:00:ef:72:8e:da:01:c0:94:6e:cf:
                    63:dc:ac:47:71:dd:00:d3:94:46:8c:a4:52:29:c8:
                    f5:43:1d:4b:57:5d:95:47:43:61:c2:09:7a:23:10:
                    ab:21:0b:20:87:a9:d0:45:d3:3c:71:d6:9e:a9:df:
                    f3:e6:c1:c9:df:aa:bd:29:82:b6:65:46:48:9c:23:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9F:2D:E6:C1:EB:08:CC:DB:80:A1:A6:6D:D2:3E:81:23:04:93:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.crl

            X509v3 Authority Key Identifier:
                keyid:D9:70:2F:5B:89:D9:C5:D3:86:61:81:94:5A:20:7B:35:45:3B:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:109::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:e4:5e:da:b9:98:b3:d7:56:2a:d1:17:de:40:40:d8:6c:cc:
         34:18:a1:20:c0:53:d5:00:bb:da:ac:ea:eb:46:eb:71:b8:9e:
         fb:25:af:6b:23:8e:c2:31:0b:a8:b4:11:18:41:79:65:6e:a1:
         31:7e:47:da:6e:c7:5d:10:91:1e:b6:59:27:2d:59:71:5f:4d:
         88:2d:ff:3f:ad:b4:fc:11:a7:21:c6:33:78:48:b5:f0:a8:db:
         80:83:c7:f8:51:cf:49:46:a0:25:0f:aa:bc:4b:6c:8c:05:3b:
         cc:8f:6f:72:06:90:9f:13:6c:10:36:b9:d5:85:93:4d:68:5c:
         f4:1a:0f:c9:22:25:d9:00:39:45:40:bc:1a:58:b6:82:72:49:
         2e:5d:bf:b3:92:df:4f:c3:e9:c5:16:dd:68:9f:52:44:34:67:
         a6:2d:51:8b:c7:d9:ed:96:c3:96:6b:2a:a6:a6:7f:97:4c:60:
         d8:ba:9c:70:52:25:6a:86:89:f8:58:56:fc:2b:1e:9c:51:9d:
         50:cb:e7:43:8e:8d:55:a2:27:0f:c0:be:e8:a2:4e:2e:cd:98:
         c5:7e:7b:98:d9:91:b8:27:05:2a:aa:0a:73:fe:b5:77:dc:cd:
         c3:31:63:ff:9c:2f:69:f8:e8:52:59:2f:73:99:70:3a:8f:ad:
         bd:46:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 04:02:31 2024 by rpki-client on console-ams.rpki-client.org